LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.
References
Information
Published : 2015-12-07 12:59
Updated : 2015-12-08 12:37
NVD link : CVE-2015-1342
Mitre link : CVE-2015-1342
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
canonical
- ubuntu_linux
- lxcfs